CVE-2013-6920

Published: Dec 7, 2013Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port (1) 21 or (2) 23.

Affected (14)

Products: Siemens: Sinamics S/g Family Firmware, Sinamics G110, Sinamics G110d, Sinamics G120, Sinamics G120c, Sinamics G120d, Sinamics G120p, Sinamics G130, Sinamics G150, Sinamics G180, Sinamics S110, Sinamics S120, Sinamics S120cm, Sinamics S150

Siemens

14 products

Sinamics S/g Family Firmware

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Siemens Sinamics S/g Family Firmware	Up to 4.6
Siemens Sinamics G110	All versions
Siemens Sinamics G110d	All versions
Siemens Sinamics G120	All versions
Siemens Sinamics G120c	All versions
Siemens Sinamics G120d	All versions
Siemens Sinamics G120p	All versions
Siemens Sinamics G130	All versions
Siemens Sinamics G150	All versions
Siemens Sinamics G180	All versions
Siemens Sinamics S110	All versions
Siemens Sinamics S120	All versions
Siemens Sinamics S120cm	All versions
Siemens Sinamics S150	All versions